Privacy Policy - Thriving with Neurodiversity

Updated January 2026

Thriving with Neurodiversity - Privacy Policy

Overview

Your privacy matters. This page explains how I collect, use and protect your personal information when you work with me for neurodiversity and ADHD coaching. It covers the types of information I hold, how I store it (including my use of Zoom and Google services), and your rights to access and correct your information.

What information I collect

I only collect information that is reasonably necessary to provide coaching and run the practice. This may include:

Contact details, such as your name, email address, phone number and preferred pronouns.
Background information you choose to share, such as your work situation, goals, diagnoses, medications or neurodivergent traits.
Coaching information such as intake forms, brief session notes, action items and emails or messages we exchange.
Administrative information such as invoices, payment records and scheduling details.

You can choose how much you share, and you can tell me at any time if there is something you do not want recorded in notes.

How information is collected

Information is collected in a few ways:

Directly from you, when you complete forms, email, message or speak with me in coaching sessions.
Through online tools I use to deliver services and run the business (for example, booking tools or invoicing software), where you enter information or it is created automatically as part of using those services.

Where another person (such as a referrer or sponsoring organisation) provides information about you, I will let you know and discuss what is shared.

How I use your information

Your information is used to:

Provide coaching services that are tailored to your goals and context.
Communicate with you about appointments, resources and follow‑up.
Manage the practice, including scheduling, billing, accounting and legal compliance.
Improve services, for example by reflecting on de‑identified patterns across clients.

I do not sell or rent your personal information, and I do not use it for unrelated marketing without your consent. If I ever wish to use your story for case examples or training, this would only be done in a de‑identified way and with your explicit permission.

Use of Zoom, Google Workspace and Gmail

To provide online services and manage information, I use reputable third‑party providers:

Zoom is used for video coaching sessions. Sessions are not recorded unless we agree in advance and you give explicit consent. If a recording is made, we will agree how it is stored, for how long, and who can access it.
Google Workspace and Gmail are used for email, calendar and document storage (for example, coaching notes or templates). These services may store data on secure servers outside Australia. They apply their own security and privacy controls, and I also apply my own safeguards (strong passwords, multi‑factor authentication and access limits).

Using these tools means some of your personal information will be processed by these providers. If you prefer not to use a particular tool (for example, you do not want session links emailed, or you prefer phone over Zoom), please let me know and we can discuss options.

When information may be shared

Your information is confidential. It will only be shared:

With your consent, for example if you ask me to share a summary with your psychologist, GP or sponsoring organisation.
Where required or authorised by law (for example, a court order or regulatory request).
Where there is a serious and imminent risk to your life or safety, or to the life or safety of someone else, and sharing information is necessary to reduce that risk.

If your coaching is sponsored by your employer or another organisation, we will agree in advance what information, if any, can be shared with them (usually high‑level themes and coaching focus, not details of conversations).

How information is stored and protected

I take reasonable steps to protect your information from loss, misuse, unauthorised access or disclosure. This includes:

Using password protection and multi‑factor authentication for devices and online accounts.
Restricting access to client information to me (and any support staff only where strictly necessary).
Using reputable, security‑focused providers for email, video and document storage.
Securely destroying or de‑identifying information when it is no longer required and after any minimum legal retention periods have passed.

Despite these measures, no system can be guaranteed completely secure. If a data breach occurs that is likely to cause serious harm, I will follow legal requirements, which may include notifying you and relevant regulators.

Accessing and correcting your information

You can:

Ask for access to the personal and health information I hold about you.
Request corrections if you believe information is inaccurate, out of date or incomplete.

In some limited situations, access may be refused or restricted (for example, where giving access would pose a serious risk to someone’s health or safety, or would unreasonably impact another person’s privacy). If that happens, the reasons will be explained to you and options discussed.

How long information is kept

Client information is generally kept for at least the minimum period required by law and professional standards. After that, it is securely destroyed or de‑identified, unless there is a valid reason to keep it longer (for example, ongoing legal or insurance requirements).

If you would like more detail about retention periods for your situation (for example, if you started coaching as a minor), you can ask at any time.

Questions or concerns

If you have questions about this page, want to update your details, or have concerns about how your information is handled, please contact me using the details on the Contact page.

If you are not satisfied with the response to a privacy concern, you may have the right to raise a complaint with the relevant privacy or health records regulator in your state or territory or at the federal level.